Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32332d3233203d3e20323637323138.roa
File:                     34352e3233312e3139362e302f32332d3233203d3e20323637323138.roa (raw, json)
Hash identifier:          o+klMPlr5fsggxFVDWhckbAWK3PWzioHFP/mYR1XsKo=
Subject key identifier:   09:C2:11:5D:F0:5D:4C:90:5C:AA:C1:E5:A9:6B:A6:B2:4F:83:93:EE
Certificate issuer:       /CN=497F436C4E5116B17795A157B3836383F68E21D5
Certificate serial:       0ECC796E6C75EA3315E712421CA6C9D5470DBED8
Authority key identifier: 49:7F:43:6C:4E:51:16:B1:77:95:A1:57:B3:83:63:83:F6:8E:21:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497F436C4E5116B17795A157B3836383F68E21D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32332d3233203d3e20323637323138.roa
Signing time:             Wed 27 Jul 2022 13:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:55:00 +0000
ROA not after:            Wed 26 Jul 2023 13:00:00 +0000
asID:                     267218
IP address blocks:        45.231.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cc:79:6e:6c:75:ea:33:15:e7:12:42:1c:a6:c9:d5:47:0d:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497F436C4E5116B17795A157B3836383F68E21D5
        Validity
            Not Before: Jul 27 12:55:00 2022 GMT
            Not After : Jul 26 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:59:30:17:c3:5c:ca:30:c0:5d:b9:97:6f:
                    38:92:fc:67:e8:0e:e8:79:b9:15:1d:30:cf:8a:e5:
                    b4:3c:5b:5c:c1:87:e4:69:67:fd:70:3a:da:79:09:
                    1d:7b:0e:60:1d:1e:6c:c7:cd:25:9d:39:38:e4:e8:
                    ac:6c:df:43:8e:c3:a1:bd:0c:38:8e:e1:5f:ad:90:
                    c9:9c:e7:ab:50:2d:15:31:a7:b2:fc:bc:c1:d5:d3:
                    35:65:6d:a5:c5:86:58:fe:d7:6b:ae:42:84:fb:29:
                    de:3d:90:bd:d6:46:d9:56:7e:c2:5c:f2:37:b4:0f:
                    ce:d3:69:db:9c:d1:28:21:4a:61:3e:6c:b1:ce:17:
                    c1:1e:a5:f9:8f:5e:47:8f:20:8f:60:a9:fe:1f:25:
                    cf:20:8b:3d:97:62:c1:b8:0e:c5:cc:91:2d:81:73:
                    60:13:b1:89:50:8c:33:30:58:05:03:9c:5b:d1:7a:
                    31:18:f8:a1:b0:c1:54:5e:4d:96:94:75:64:e5:c5:
                    a2:7f:a1:52:f0:05:eb:9c:71:e7:e9:08:c5:af:a0:
                    3b:d2:08:12:a3:62:1b:74:56:ef:5a:9e:16:36:25:
                    f4:cf:40:67:dd:e0:09:7b:04:0d:ca:75:10:e8:ff:
                    b9:43:be:04:d4:e4:db:2b:da:9e:e5:41:75:b8:c3:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:11:5D:F0:5D:4C:90:5C:AA:C1:E5:A9:6B:A6:B2:4F:83:93:EE
            X509v3 Authority Key Identifier:
                keyid:49:7F:43:6C:4E:51:16:B1:77:95:A1:57:B3:83:63:83:F6:8E:21:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/497F436C4E5116B17795A157B3836383F68E21D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497F436C4E5116B17795A157B3836383F68E21D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32332d3233203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:b0:b3:aa:ad:84:71:f2:d5:a9:08:4e:7a:4a:b0:1a:eb:
         b2:d8:dc:c8:0d:c7:a1:8c:21:30:fb:30:00:a9:95:22:c9:85:
         0a:47:b8:7a:a5:ca:53:d9:a9:7e:fc:20:6d:b8:11:e0:c1:2d:
         0b:d5:f9:be:67:1b:f1:cd:85:cb:b9:d1:43:dd:eb:47:79:ba:
         06:5d:be:5c:64:98:bd:6e:94:44:2e:3f:e0:2e:ac:34:62:cb:
         93:5b:e7:01:4b:dc:cf:87:3a:84:db:54:7c:90:ac:00:d5:6c:
         ad:94:db:b9:4f:08:95:d8:06:a4:cb:86:94:4b:93:de:63:f9:
         ca:2d:c9:8d:5d:7a:7f:12:1d:20:91:ec:06:07:cf:25:b6:c3:
         d9:61:d2:af:d1:44:08:c9:b4:46:f8:b8:b6:e5:61:e4:94:37:
         75:1a:6d:cc:ae:f1:aa:51:e2:a0:2a:3f:1b:75:62:87:45:04:
         c9:27:3a:74:57:28:4f:72:85:cd:99:e9:28:a1:c4:71:36:57:
         c4:61:3f:61:5a:f6:f7:12:f6:ff:9c:c8:8f:b1:04:f6:9d:45:
         d9:63:cb:2a:2f:4b:c8:48:b7:5d:81:b6:82:82:55:1a:cf:4e:
         0d:e7:7b:fe:cd:51:75:75:c6:f8:45:e5:ac:47:d6:0b:1d:10:
         e2:cd:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org